H3C Technologies H3C WX3000 Series Unified Switches - Manual (Page 63)

1-1
8
User Control
Refer to ACL in H3C WX3000 Series Unified Switches Switching Engine Configuration Guide for
information about ACL.
Introduction
The switching engine provides ways to control different types of login users, as listed in Table 8-1 .
Table 8-1 Ways to control different types of login users
Login mode Control method Implementation Reference
By source IP
address
Through basic ACLs
Controlling Telnet Users by Source IP
Addresses
.
By source and
destination IP
address
Through advanced
ACLs Controlling Telnet Users by Source and
Destination IP Addresses
Telnet
By source MAC
address
Through Layer 2 ACLs
Controlling Telnet Users by Source MAC
Addresses
SNMP
By source IP
addresses
Through basic ACLs
Controlling Network Management Users by
Source IP Addresses
By source IP
addresses
Through basic ACLs Controlling Web Users by Source IP Address
WEB
Disconnect Web
users by force By executing
commands at CLI
Disconnecting a Web User by Force
Controlling Telnet Users
Prerequisites
The controlling policy against Telnet users is determined, including the source IP addresses, destination
IP addresses and source MAC addresses to be controlled and the controlling actions (permitting or
denying).
Controlling Telnet Users by Source IP Addresses
Controlling Telnet users by source IP addresses is achieved by applying basic ACLs, which are
numbered from 2000 to 2999.
Follow these steps to control Telnet users by source IP addresses: